Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File:                     jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier:          4J415hvSd3xw6nMSbZvNjVgjP8BvID8vEJKAXISfoK4=
Subject key identifier:   B9:95:40:73:01:0D:88:10:34:AC:3E:78:0C:78:4C:52:A6:B3:AD:5A
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer:       /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial:       0197C45C39F78AED8B9BFAF5595031CC69AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number:          05FD
Signing time:             Tue 01 Jul 2025 05:01:07 +0000
Manifest this update:     Tue 01 Jul 2025 05:01:07 +0000
Manifest next update:     Wed 02 Jul 2025 05:01:07 +0000
Files and hashes:         1: LZnMbOvKNCeS9warD4gVCngTQgc.roa (hash: 6Cg/OSuVm718gl/BiJrXMhTNmjh+ffJ7x+FKxzJQO0A=)
                          2: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: ONwkqWjnIaYBuzf6DfZj2mg/eBJykuXSw7fWFwvd4fg=)
                          3: yl9TGfZBXnKybJW81dLesyL85jw.roa (hash: 5T9nUKakC/d5Fj82Q3FOurA0Y8gDP1/Vr4z0jWpM3OA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:5c:39:f7:8a:ed:8b:9b:fa:f5:59:50:31:cc:69:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
        Validity
            Not Before: Jul  1 05:01:07 2025 GMT
            Not After : Jul  2 05:01:07 2025 GMT
        Subject: CN=b9954073010d881034ac3e780c784c52a6b3ad5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:10:97:ea:5a:8a:38:65:3d:e4:61:4f:e2:
                    18:21:0b:4a:08:ec:bc:1b:ba:e2:c9:93:a0:c2:cf:
                    96:82:89:f3:a5:60:99:d8:6a:e0:f0:cf:db:b1:2b:
                    c7:6f:ab:c7:b5:80:3f:42:d8:c0:d8:a8:b0:6f:e9:
                    20:9f:05:b9:cf:dc:18:ea:99:64:7e:c8:4d:d7:3e:
                    a4:a5:16:a6:e6:17:c6:ac:81:26:62:6b:40:e8:48:
                    7c:8f:22:74:e7:09:0c:d1:23:17:6c:6e:75:9e:71:
                    ed:a0:44:8d:5f:1e:1f:35:3a:c7:e1:29:84:ae:9d:
                    01:6f:e9:34:8d:90:35:e6:13:ba:0f:c7:39:ab:65:
                    8d:d4:5a:c7:2d:82:9d:f9:c9:1f:86:83:82:ba:86:
                    df:b0:07:1b:e4:8c:e7:19:ca:0a:4d:79:b1:07:05:
                    92:fa:ad:d7:20:5c:c7:02:c0:55:b9:f3:7c:ee:68:
                    fa:10:e3:dd:e0:f1:78:5f:8f:1f:25:66:e6:99:84:
                    a1:cf:66:9c:7e:6b:f1:78:e4:15:18:15:6a:04:c3:
                    35:d9:fc:bc:94:b9:45:67:ce:5e:3d:bd:ff:14:9f:
                    1b:fb:31:7c:d7:e1:15:dd:c2:dc:54:2a:f8:32:28:
                    88:7f:85:48:36:27:4d:6b:71:1b:40:78:c7:c0:00:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:95:40:73:01:0D:88:10:34:AC:3E:78:0C:78:4C:52:A6:B3:AD:5A
            X509v3 Authority Key Identifier:
                keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2f:6b:cd:b6:44:f5:28:c8:23:0d:55:d4:7e:18:14:49:cf:
         3c:96:ce:0f:ba:95:52:0c:df:eb:0a:5e:6c:71:d5:00:8a:81:
         70:11:43:a9:f1:1b:bd:f6:d8:1c:c5:4f:06:86:30:9f:f7:4c:
         3f:e9:3a:23:b2:43:c6:92:4b:ef:29:a9:54:ca:ae:1f:20:d2:
         d0:ea:13:65:79:9c:53:e3:5b:89:85:ac:9c:b1:d0:9a:6b:d5:
         ba:6a:26:70:35:50:61:b4:b3:b2:0e:f8:6f:b1:89:c4:e3:e1:
         c7:98:aa:db:c6:9f:fa:2e:33:55:9a:c2:80:f1:a4:2f:63:3e:
         5b:2f:1d:22:05:04:1e:60:59:2a:84:12:24:aa:b8:e4:4c:9d:
         85:78:5b:29:bf:df:31:e7:d9:2c:46:dc:5d:ce:a4:86:76:ee:
         f3:ff:11:43:35:cf:7c:44:ab:23:46:a0:e1:65:14:d5:95:fc:
         8c:36:d7:e9:a8:64:d3:c4:ce:f5:47:4d:de:7f:47:ce:00:68:
         e2:76:48:fe:d3:3a:1a:07:59:c8:e3:f5:26:45:a2:c4:7f:ba:
         fc:4c:c4:87:19:1b:94:4d:2d:f2:ed:a6:0d:4f:1f:49:e6:68:
         67:c4:1a:2d:bb:77:d8:af:c2:8b:5f:f9:14:3c:cb:56:b6:be:
         14:36:13:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEXDn3iu2Lm/r1WVAxzGmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZGY2YzJhZDdhY2VjYWQwNjZlMWY3N2ZlMDU5MjJmMDE2
OTE1MzYwHhcNMjUwNzAxMDUwMTA3WhcNMjUwNzAyMDUwMTA3WjAzMTEwLwYDVQQD
EyhiOTk1NDA3MzAxMGQ4ODEwMzRhYzNlNzgwYzc4NGM1MmE2YjNhZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOMQl+paijhlPeRhT+IYIQtKCOy8
G7riyZOgws+WgonzpWCZ2Grg8M/bsSvHb6vHtYA/QtjA2Kiwb+kgnwW5z9wY6plk
fshN1z6kpRam5hfGrIEmYmtA6Eh8jyJ05wkM0SMXbG51nnHtoESNXx4fNTrH4SmE
rp0Bb+k0jZA15hO6D8c5q2WN1FrHLYKd+ckfhoOCuobfsAcb5IznGcoKTXmxBwWS
+q3XIFzHAsBVufN87mj6EOPd4PF4X48fJWbmmYShz2acfmvxeOQVGBVqBMM12fy8
lLlFZ85ePb3/FJ8b+zF81+EV3cLcVCr4MiiIf4VINidNa3EbQHjHwADDiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmVQHMBDYgQNKw+eAx4TFKms61aMB8GA1UdIwQY
MBaAFI7fbCrXrOytBm4fd/4Fki8BaRU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanQ5c0t0ZXM3SzBHYmg5M19nV1NMd0ZwRlRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZTdlZjctMTgzMS00MmY2LWEyY2Mt
YWUyOTBkNTViZGI3LzEvanQ5c0t0ZXM3SzBHYmg5M19nV1NMd0ZwRlRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZTdlZjctMTgzMS00MmY2LWEyY2MtYWUyOTBkNTViZGI3
LzEvanQ5c0t0ZXM3SzBHYmg5M19nV1NMd0ZwRlRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABy9rzbZE
9SjIIw1V1H4YFEnPPJbOD7qVUgzf6wpebHHVAIqBcBFDqfEbvfbYHMVPBoYwn/dM
P+k6I7JDxpJL7ympVMquHyDS0OoTZXmcU+NbiYWsnLHQmmvVumomcDVQYbSzsg74
b7GJxOPhx5iq28af+i4zVZrCgPGkL2M+Wy8dIgUEHmBZKoQSJKq45EydhXhbKb/f
MefZLEbcXc6khnbu8/8RQzXPfESrI0ag4WUU1ZX8jDbX6ahk08TO9UdN3n9HzgBo
4nZI/tM6GgdZyOP1JkWixH+6/EzEhxkblE0t8u2mDU8fSeZoZ8QaLbt32K/Ci1/5
FDzLVra+FDYTcQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 08:48:57 2025 by rpki-client